Back to Database
Status published
High
CVE-2017-7548
PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to...
Vulnerability Description
PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a denial of service.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-7548
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.debian.org/security/2017/dsa-3936
- https://access.redhat.com/errata/RHSA-2017:2678
- http://www.debian.org/security/2017/dsa-3935
- http://www.securitytracker.com/id/1039142
- https://www.postgresql.org/about/news/1772/
- http://www.securityfocus.com/bid/100276
- https://security.gentoo.org/glsa/201710-06
- https://access.redhat.com/errata/RHSA-2017:2677
More from PostgreSQL
View All →CVE-2019-10211
Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24...
High
7.8
CVE-2019-10210
Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24...
Medium
6.7
CVE-2019-10209
Postgresql, versions 11.x before 11.5, is vulnerable to a memory...
Low
3.1
CVE-2019-10208
A flaw was discovered in postgresql versions 9.4.x before 9.4.24,...
High
7.5
CVE-2019-10164
PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4...
High
7.5
Affected Vendor
PostgreSQL
View all reports →Affected Software
postgresql
Vulnerable Versions:
9.4.x before 9.4.13, 9.5.x before 9.5.8, 9.6.x before 9.6.4
Timeline
Official Publish:
August 16th, 2017
Last Modified:
September 16th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N